876 matches found
CVE-2022-47895: Cleartext Transmission of Sensitive Information
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files...
CVE-2022-46826
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46827
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...
CVE-2022-46828
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...
CVE-2022-46828
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...
CVE-2022-46826
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46827
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...
CVE-2022-46825
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
CVE-2022-46824
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...
CVE-2022-46825
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
CVE-2022-46824
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...
Buffer overflow
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...
Command injection
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...
Open redirect
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...
Path traversal
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...
CVE-2022-46828
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...
CVE-2022-46828
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...
CVE-2022-46828
JetBrains IntelliJ IDEA is affected up to version 2022.3 on macOS due to a DYLIB injection vulnerability. The issue affects the loader path of dynamic libraries and can lead to local exploitation with high impact (per NVD: CVSSv3.1 base score 7.8, local access, high confidentiality/integrity/avai...
CVE-2022-46827
The CVE-2022-46827 entry affects JetBrains IntelliJ IDEA prior to 2022.3. The vulnerability is an XXE that enables SSRF via requests to custom plugin repositories, exploiting a flaw in handling external repository requests. Impact is described as SSRF with partial guidance in some feeds; confiden...